CVE - CVE-2024-41074

CVE-ID
CVE-2024-41074	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set object to close if ondemand_id < 0 in copen If copen is maliciously called in the user mode, it may delete the request corresponding to the random id. And the request may have not been read yet. Note that when the object is set to reopen, the open request will be done with the still reopen state in above case. As a result, the request corresponding to this object is always skipped in select_req function, so the read request is never completed and blocks other process. Fix this issue by simply set object to close if its id < 0 in copen.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0845c553db11c84ff53fccd59da11b6d6ece4a60 URL:https://git.kernel.org/stable/c/0845c553db11c84ff53fccd59da11b6d6ece4a60 MISC:https://git.kernel.org/stable/c/4f8703fb3482f92edcfd31661857b16fec89c2c0 URL:https://git.kernel.org/stable/c/4f8703fb3482f92edcfd31661857b16fec89c2c0 MISC:https://git.kernel.org/stable/c/703bea37d13e4ccdafd17ae7c4cb583752ba7663 URL:https://git.kernel.org/stable/c/703bea37d13e4ccdafd17ae7c4cb583752ba7663 MISC:https://git.kernel.org/stable/c/c32ee78fbc670e6f90989a45d340748e34cad333 URL:https://git.kernel.org/stable/c/c32ee78fbc670e6f90989a45d340748e34cad333
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)